the grugq's newsletter

Subscribe
Archives
July 22, 2024

July 22, 2024

July 22, 2024

https://www.reuters.com/technology/microsoft-says-about-85-million-its-devices-affected-by-crowdstrike-related-2024-07-20/


The world’s financial, travel, and healthcare infrastructure rests
entirely on a few underfunded projects supported by volunteers. If we had all donated even a small amount back to Microsoft and Crowdstrike, they could have paid someone to prevent this problem

— apenwarr (@apenwarr) July 21, 2024


When ChatGPT summarises, it actually does nothing of the kind. – R&A IT Strategy & Architecture

One of the use cases I thought was reasonable to expect from ChatGPT and Friends (LLMs) was summarising. It turns out I was wrong. What ChatGPT isn’t summarising at all, it only looks like it…


The most viral and viewed threads on Twitter about the CrowdStrike incident are all conspiracy nonsense.

This one is fucking incredible. pic.twitter.com/RCWGRkwZEs

— Kevin Beaumont (@GossiTheDog) July 21, 2024


Effort to reimplement and open source Wi-Fi stack for ESP32 SoCs through reverse engineering pre-compiled binary blobs

Part 1: https://t.co/ZGtu0ZIaAk
Part 2: https://t.co/tTTLNn8D6a
Repo: https://t.co/25ezvSu2Fw#esp32 #cybersecurity pic.twitter.com/Nz4Td36Fnq

— 0xor0ne (@0xor0ne) July 20, 2024


News broke yesterday that UK police have arrested a third member of #TheCom / #SCATTEREDSPIDER

Big shoutout to MGM for 1) refusing to pay the ransom and 2) assisting LE to locate their attackers - prime example of the power of cybercrime intelligence! 👏https://t.co/pnIMsVaSIo https://t.co/YyyTTHF7ot pic.twitter.com/XBrwrEFwzT

— Will (@BushidoToken) July 20, 2024


PACMAN: Attacking ARM Pointer Authentication with Speculative Executionhttps://t.co/4QuLX2NNXU

— Meysam (@R00tkitSMM) July 20, 2024

-

I’m especially tickled that cyberpro bros haaaated when I said outages are way worse for biz than the vast majority of cyberattacks

and that cybersecurity problems really aren’t as hard relative to other software concerns as they pretend…

(See also: https://t.co/sg4ozYLrNu)

— Kelly Shortridge (@swagitda_) July 21, 2024


Disney was hacked after an employee downloaded a BeamNG mod.

Disney was breached by a furry hacktivist group, leaking 1TB of data. The hackers claim their actions were motivated by the shutdown of Club Penguin.

The breach, facilitated by a Trojan horse hidden in a BeamNG mod. pic.twitter.com/xgv0pTu2HY

— AR12GAMING (@AR12Gaming) July 21, 2024


Timeless pic.twitter.com/0NYRld56DO

— John B. Holbein (@JohnHolbein1) July 21, 2024


I knew it! How deep does the rabbit hole go??

Fucking columbo over here discovering links between SIGINT agencies and security vendors 🤪🤪🤪 because they: sponsored a conference 🤣🤣🤣🤣🤣🤣 pic.twitter.com/ks8c8BU1gD

— mRr3b00t (@UK_Daniel_Card) July 21, 2024


surprised by how many people nowadays don't know how to build a wardrobe on a budget.

— make a list of the things you want
— give yourself ~7 years to build a wardrobe
— buy a ski mask (~$15) and screwdriver ($10)
— steal cars
— shop on sale https://t.co/o7i4L2OOCG

— derek guy (@dieworkwear) July 21, 2024


One takeaway from this weekend :

MacOS isn't used for anything important. 😂

— Jamie Maguire | MVP in AI (@jamie_maguire1) July 20, 2024


Google hacks 😂 pic.twitter.com/tezRcYebv4

— Tanya Janca (@shehackspurple) July 21, 2024


The serious science of trolling LLMs, or why you should tip your neighborly internet edgelord: https://t.co/owFZ1kJgUk

— lcamtuf (@lcamtuf) July 22, 2024

The serious science of trolling LLMs - lcamtuf’s thing

The internet's oldest pastime finally has a purpose -- and it's more serious than AI companies would like to admit.


After 4 months or so, here’s an article where I explain how I hacked Amazon’s first MediaTek based tablet. From Preloader to LK :)https://t.co/mdNIRHHDz4

— Roger (@r0rt1z2) July 21, 2024


Inspired by @aall86's "Debugging the undebuggable" blog, and his chapters in the Windows Internals Part 2 book, I used JTAG to explore the very earliest part of the Windows boot flow, even before the Secure Kernel is initialized in VTL 0: https://t.co/BIHKeMKHuL pic.twitter.com/6f1t7RWXfn

— Alan Sguigna (@AlanSguigna) July 21, 2024


✍️ RIPencapsulation: Defeating IP Encapsulation on TI MSP Deviceshttps://t.co/AQSsOzI5K8

— Alex Plaskett (@alexjplaskett) July 20, 2024

Don't miss what's next. Subscribe to the grugq's newsletter:
Start the conversation:
X